CVE-2004-2221

CVE-2004-2221 describes a critical buffer overflow vulnerability in Mercantec SoftCart 4.00b, specifically within the SoftCart.exe component. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending a crafted, excessively long parameter in an HTTP GET request. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of the affected system (confidentiality, integrity, and availability impacts are all rated "partial"). Exploit code is publicly available, including multiple Metasploit modules and entries on ExploitDB, indicating a high potential for exploitation despite no current evidence of active in-the-wild attacks or significant community discussion.